Security Advisory

CVE-2026-25628

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-06 20:44:13

Last updated 2026-02-06 21:11:27

Assigner GitHub_M

State PUBLISHED

Description

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path. Minimal privileges are required (read-only access). This vulnerability is fixed in 1.16.0.

← Browse all CVEs View on cve.org ↗